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Abstract 

The complexity of the dual basis of a type I optimal normal basis of F q n over 
F q was determined to be 3n — 3 or 3n — 2 according as q is even or odd, 
respectively, by Z.-X. Wan and K. Zhou in 2007. We give a new proof to this 
result by clearly deriving the dual of a type I optimal basis with the aid of a 
lemma on the dual of a polynomial basis. 
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1. Introduction 

Let ¥ q n be an extension of the finite field ¥ q . A basis of the form 
{a, a g , . . . , a q " } is called a normal basis, and a is called a normal basis 
generator in this case. Normal bases have great advantages against the com- 
mon polynomial bases in arithmetic of finite fields. A simple property about 
a normal basis is it has normal dual basis. By dual basis {/?*, . . . , (3*} of a 
given basis {f3 1 , f3 n }, we mean Tr ¥q7l /¥q ((3i(3*) = 1 < i, j < n. 

For a normal basis generator a, denote «j = a q \ i = 0, ... ,n — 1 and 
iV = {a 0} . . . ,a n _i}. Let 

n— 1 

a ■ at = ^Jt^oij, G F q , < i < n— 1. 

3=0 
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The number of nonzero elements in the n x n matrix T = (t^) is called the 
complexity of the normal basis N. We denote it by CV- It can be shown 
that Cn > 2n — 1, and N is called optimal when the lower bound is attained. 

A type I optimal normal basis of W q n over ¥ q is the normal basis formed 
by the n nonunit (n + l)-th roots of unity, where n + 1 is a prime and q 
is primitive modulo n + 1 [2]. In [3j] the dual of a type I optimal normal 
basis was studied, and its complexity was determined to be 3n — 3 or 3n — 2 
according as q is even or odd, respectively. 

Two bases . . . , f3 n } and {/?(,..., {3' n } of ¥ q n over ¥ q are called equiv- 
alent, or weakly equivalent, if = c/^, z = l,...,n for some c G F 9 , or 
F g n, respectively. It is easy to see equivalent normal bases share the same 
complexity. 

In this paper, we clearly derive the dual M of a type I optimal normal 
basis N through a new approach and thus rediscover the complexity of it. 
The main auxiliary lemma we use will be presented in section [21 and in section 
|3l we will propose our method to get M and its complexity, which is totally 
different from that in ji[ and seems more simple and easier to understand. 

2. Auxiliary lemma on the dual of a polynomial basis 

The following lemma, proposed as an exercise in 0, Chapter 2], is the 
main result we will need in computing the dual of a type I optimal normal 
basis. We will include a short proof for it here for completeness. 

Lemma 1. Let¥ q n = ¥ q (a) be an extension of the finite field ¥ q , and f(x) G 
¥ q [x] be the minimal polynomial of a. Assume 



Then the dual basis of the polynomial basis {1, a, . . . , a n l } is jjj^jiPo, Pi, ■ ■ ■ , 
0n-i} ■= {/%) > /%)) • • • > JJ$}> where f is the formal derivative of f. 

Proof. Let <jj be the i-th Frobenius automorphism of ¥ q n/¥ q and on = 
(Ti(at) = ofl\ < i < n—1. Then f(x) = YYi=o( x ~ a i)- For I — 0, 1, . . . , n — 1, 
we construct the auxiliary polynomial 



/(*) 



(3 + (3 lX + ■ ■ ■ + P^x"- 1 6F,„[4 



x — a 
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It's easy to check = for i = 0, 1, ... ,n — 1. Thus F t (x) = since 

deg Fi(x) < n — 1. On the other hand, 



n— i 

Ft(x) = J>i( 



fix) a 1 
x — a f'(a) 

n— 1 n— 1 



a;- 7 - 



a 



5> Eft- /'(.) 

i=0 j=0 17 v y 

n— 1 / n— 1 ; 



E E<^ 



j=o \ i=o v ; 



n-1 



a" ix- 7 . 



So we get Trp^/Fq (y^y a ') = 8ji f° r an y < j, I < n — 1, which is what 



we 



want to prove. □ 

Remark 1. In fact, the lemma and the proof hold for any separable alge- 
braic field extension K(a)/K. 

3. Dual basis of a type I optimal normal basis and its complexity 

Recall that a type I optimal normal basis of ¥ q n over ¥ q is of the form 
N = {a, a 2 , . . . , a n } = a{l,a, . . . , a"" 1 } where a is a root of the primitive 
polynomial f(x) = Y^i=o xl [2!] , i.e. it is weakly equivalent to the polynomial 
basis {1, a, ... , a n ~ 1 }. Thus if we can compute the dual of the polynomial 
basis, say jrr^{Po, 01, ■ ■ ■ > ftn-i} by Lemma [fl then we can get the dual of 
iV of the form M = a f}^ {Po, Pi, ■ ■ ■ , Ai-i}- The remaining task is just to 
compute af'(a) and (3o, . . . , n -i- 

Lemma 2. 

ft \ n + 1 

a f («) = 7- 

a — 1 

Proof. Since f(x) = YYi=i( x ~ al )-> we know that 

n n— 1 /• / 1 \ n — i 

f(a) = U(a - a*) = flC 1 - a<) = = ^—,(n + 1). 

i=2 t=l 
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Then 



af'(a) 



a 



a' 



[n + l) 



a 



n+l 



a — a 



n+l 



[n+l) 



n 



a 



□ 



Lemma 3. 

a n ~ % - 1 

Pi = t- , i = 0,1,..., 7i- I. 

a — 1 

Proof. Since g = Ui=2( x ~ «*) = we S et = 1 and 

/3 n _j = (— l) l_1 cri_i(a 2 , a 3 , . . . , a") for i = 2, . . . , n, where cr^ stands for the 
fc-th elementary symmetric polynomial. 

As /(x) = nr=i( x — a% ) = YH=o xl i we know that 

1 = (-iy<Ji(a,a 2 ,a 3 , . . . ,a n ) 

= (— l) < [£7 i (o; 2 , a 3 , . . . , a n ) + acr;_i(a 2 , a 3 , . . . , a n )} 

= (-l)Vi(a 2 , a 3 ,..., a n ) - a(-l) i -Vi_i(a 2 , a 3 , . . . , a n ) 

Pn—i—l CXPn—i- 

Thus 

= 1 + a(l + apn-i+i) 

= l + a + a 2 p n - i+1 



= 1 + a + a 2 H h a^n-i 

= 1 + aH ha* 

- 1 



a — 1 



for z 



1,- 



,71 



1. So A 



a-l 



for z = 0, 1, . . . , 7i — 1. 



□ 



From Lemma [2] and Lemma El we can clearly get that the dual of iV is 

M = -^{A>, ft, , ft-i} = — IrrK - !> - 1, .-.,«- 1}. 
at (a) n+l 
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Theorem 4. The complexity of the dual of a type I optimal normal basis is 
3n — 3 when q is even, and 3n — 2 when q is odd. 

Proof. We use the notations above. We only need to compute the com- 
plexity of (ra + 1)M = {a n — 1, a n_1 — 1, . . . , a — 1} as it is equivalent to 
M. 

Since 

(a n -l)(o:*-l) = a n+i - a n - a 1 + 1 

= (a l ~ l - 1) - (a n - 1) - (a 1 - 1) 




-(a n - 1) - {a - 1) if i = 1 

(V" 1 - 1) - {a n - 1) - (a* - 1) if 2 < i < ra - 1 
(a"' 1 - 1) - 2(a" - 1) if i = n, 



we can get the complexity of (n + 1)M is 2 + 3(n — 2) + 1 = 3n — 3 when g 
is even, and is 2 + 3(n — 2) + 2 = 3n — 2 when g is odd. □ 

Remark 2. Note that the main observation we make in deriving the dual 
of a type I optimal normal basis generated by a is the weak equivalence 
between it and the polynomial basis generated by a, so it is a natural question 
that when will a normal basis generator j3 generate a normal basis weakly 
equivalent to the polynomial basis generated by it in a general finite field 
F g n. We remark that this happens if and only if j3 is a type I optimal normal 
basis generator. The reason is simple: if there exists some 7 G ¥ q n such that 
N = {/3,/?V • ■il3 q "~ 1 } = /?,-.-, we know that = 7/3 fe for some 

k eZ, < Jfe < ra - 1. Thus 7 = f3 l ~ k . If k ^ 0, 7/3 fc " 1 = f3° = 1, which is 
impossible since it is an element of N. So 7 = /3. A normal basis of the form 
{/3, /3 2 , . . . ,/3 n } must be a type I optimal normal basis, as its complexity is 
no more than 2ra — 1. 
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